diff --git a/scripts/http-dombased-xss.nse b/scripts/http-dombased-xss.nse index bcf41c2c6..18eaf9082 100644 --- a/scripts/http-dombased-xss.nse +++ b/scripts/http-dombased-xss.nse @@ -34,6 +34,7 @@ http://www.webappsec.org/projects/articles/071105.shtml -- @see http-stored-xss.nse -- @see http-phpself-xss.nse -- @see http-xssed.nse +-- @see http-unsafe-output-escaping.nse --- categories = {"intrusive", "exploit", "vuln"} diff --git a/scripts/http-stored-xss.nse b/scripts/http-stored-xss.nse index c57c44b02..c0591d5b7 100644 --- a/scripts/http-stored-xss.nse +++ b/scripts/http-stored-xss.nse @@ -51,7 +51,7 @@ strings to determine whether the payloads were successful. -- @see http-dombased-xss.nse -- @see http-phpself-xss.nse -- @see http-xssed.nse ---- +-- @see http-unsafe-output-escaping.nse categories = {"intrusive", "exploit", "vuln"} author = "George Chatzisofroniou" diff --git a/scripts/http-unsafe-output-escaping.nse b/scripts/http-unsafe-output-escaping.nse index 2ef97c1c5..7d1bc7e7e 100644 --- a/scripts/http-unsafe-output-escaping.nse +++ b/scripts/http-unsafe-output-escaping.nse @@ -38,6 +38,10 @@ indication of potential XSS vulnerability. -- domain. This widens the scope from withinhost and can -- not be used in combination. (default: false) -- +-- @see http-dombased-xss.nse +-- @see http-stored-xss.nse +-- @see http-phpself-xss.nse +-- @see http-xssed.nse author = "Martin Holst Swende" license = "Same as Nmap--See https://nmap.org/book/man-legal.html"